DokuWiki upgrade package for Fedora 28

Introduction

Linux distribution Fedora provides via its repositories a simple to use and highly versatile Open Source wiki software DokuWiki. At least since Fedora 24 until the recent Fedora 28 the provided DokuWiki version is 20150810a. Outdated DokuWiki version brings of course some issues:

Apache configuration file, provided by the package, does not restrict access to DokuWiki’s configuration files. This makes it possible to invoke PHP files from conf directory, but – what’s worse – it also exposes content of non-PHP files. When DokuWiki configuration is saved, it saves copy of modified configuration file to a backup file and this backup can be publicly accessed. This way backup files leak confidential information from the configuration ( like credentials set for authentication plugins and so on ). Additionally also bin directory is unrestricted.

As it seems that the Fedora’s dokuwiki package is orphaned, there is very low chance of remedy coming from the updates soon.

Update 1:

DokuWiki package in Fedora has been taken over by a new packager, who merged my pull request with all fixes addressing the issues mentioned in this article. Now you can simply upgrade the dokuwiki package to the latest version from official repositories.

Version Upgrade Information

To address these issues and in an attempt to provide compatible and working Fedora DokuWiki upgrade, I’ve prepared an upgrade package with current stable recommended DokuWiki version 20180422a for Fedora 28. The package has been built and is distributed via the Fedora’s community projects build service (COPR), where it has its dedicated repository: pessoft/dokuwiki. The new package comes from the original Fedora’s dokuwiki package, to make it as compatible as possible. But it also has some additional changes:

Updates DokuWiki version to 20180422a

Adds required vendor directory

Replaces dependencies on libraries located in vendor directory with libraries provided by Fedora’s packages where available (simplepie, phpseclib, random_compat, lesserphp)

Upgrade Procedure

Before the upgrade, make sure that you have a backup of your DokuWiki’s data and configuration, so you can rollback in case of some incompatibility. Thanks to the COPR repository, it is very easy to upgrade Fedora’s DokuWiki. Just follow these steps as root user to install the new package:

Related Posts

Munin is a great monitoring tool, which gathers performance data from the plugins running on the nodes and presents them in graphs with web interface. Munin's graphs and web pages are generated either statically by cron jobs or dynamically upon request via Munin CGI tools. With Munin CGI, only web pages and graphs which are actually needed - requested by user's browser - are dynamically generated. This article describes configuration of the Munin CGI with Apache web server running on Fedora 26.